Windows Administration Resource Kit: Productivity Solutions for IT Professionals

8-2: Delegate Management of Group Membership

Solution overview

Type of solution	Guidance
Features and tools	The security interfaces of the Active Directory Users and Computers snap-in, Dsacls, the Managed By tab
Solution summary	There are several methods with which to delegate the Write::Members permission that enables the management of a group's membership. There are even scenarios that warrant delegating the permission to individual group objects rather than to an entire OU.
Benefits	Least-privilege delegation of group membership management and the ability to allow business owners of resources to manage access to those resources.

Introduction

This Solution Collection builds a framework that enables more sophisticated group management, including the creation ...